TH-200: Foundational Threat Hunting (OSTH)

Learn about the different stages and types of threat hunts that enterprises use through an overview of basic objectives, concepts, and practices

Get an overview of various threat actors, with a focus on ransomware groups and Advanced Persistent Threats (APTs), and review in-depth discussions of several well-known actors

Discover how threat hunters use the Traffic Light Protocol to receive and use threat intelligence to create reports

Use Network Indicators of Compromise (IoCs) with IDS/IPS tools like Suricata to monitor for suspicious activity, identify network compromises, and build practical threat-detection skills

Hunt for threats with Endpoint IoCs and use intelligence- and hypothesis-based approaches to make your hunts more effective

Hunt for threats without relying on known IoCs and focus on behavioral analysis and data correlation to detect advanced threats with tools like CrowdStrike Falcon